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IN THE CLAIMS 

The following is a listing of the claims in the application with claims 1,14 and 
36, shown as amended. Claims 2-4, 9, 19-23 and 48-53 were previously cancelled. 

LISTING OF CLAIMS 
1 . (currently amended) Method for an operator to dynamically and 
remotely control the pairing of a unique digital data reception equipment (2) with 
on e or mor e a plurality of different external security modules (6, 8) each having a 
unique identifier and with each of the different security modules being adapted to 
cooperate with said one digital data reception equipment for controlling reception of 
distributed data by means of said digital data reception equipment (2) and with the 
digital data reception equipment having a computer and a stored program said 
method comprising the following steps: 

using the computer to verify whether or not the identifier o f each said 
external security modules (6, 8) is already memorized in an updated list of external 
security module identifiers transmitted to the digital data reception equipment (2), 
upon connection of said external security modules (6, 8) to the digital data reception 
equipment, 

if the unique identifier of the external security modules (6, 8) is 
memorized in the digital data reception equipment (2), transmitting a control signal to 
the digital data reception equipment (2) defining configuration parameters to activate 
the pairing of said digital data reception equipment (2) with said external security 
modules (6, 8), and 
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if the unique identifier of the external security modules (6, 8) is not 
memorized in the digital data reception equipment (2), transmitting a control signal to 
the digital data reception equipment (2) defining configuration parameters to 
deactivate the pairing of said digital data reception equipment (2) with said external 
security modules (6, 8); wherein 

said configuration parameters include at least one of the following functional 
parameters: 

authorizing memorization, 
prohibiting memorization, 

erasing identifiers previously memorized in the digital data reception 
equipment (2), and 

activating or deactivating a verification phase including a procedure 
consisting of disturbing the data processing if the identifier of the connected external 
security module (6, 8) is not previously memorized in the digital data reception 
equipment (2). 

Claims 2-4 (previously cancelled). 

5. (previously amended) The method according to claim 1 , wherein 
said control signal also includes an indication as to the maximum allowable number 
of identifiers to be memorized in the digital data reception equipment (2). 

6. (previously amended) The method according to claim 1 , wherein said 
configuration parameters includes a reconfiguration instruction through which an 
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updated list of identifiers of external security modules (6, 8) paired with the digital 
data reception equipment (2) is transmitted to said digital data reception equipment 
(2). 

7. (previously amended) The method according to claim 6, wherein said 
updated list of identifiers is transmitted directly to the digital data reception 
equipment (2). 

8. (previously amended) The method according to claim 6, wherein 
said updated list of identifiers is transmitted through the external security module (6, 
8) connected to said digital data reception equipment (2). 

9. (previously cancelled). 

10. (previously amended) The method according to claim 1, wherein said 
distributed data is either unencrypted or is encrypted by means of an encrypted 
control word and in that each external security module (6, 8) includes access rights 
to said data and a decryption algorithm for said control word. 

11. (previously amended ) The method according to claim 1, wherein said 
configuration parameters are transmitted to the digital data reception equipment (2) 
in an EMM message specific to an external security module (6, 8) associated with 
said digital data reception equipment (2). 
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12. (previously amended ) The method according to claim 1, wherein said 
configuration parameters are transmitted to a digital data reception equipment (2) in 
an EMM message specific to said digital data reception equipment (2). 

13. (previously amended) The method according to claim 6, wherein for a 
given digital data reception equipment (2), said updated list of identifiers is 
transmitted in an EMM message specific to a security module (6, 8) associated with 
this digital data reception equipment (2). 

14. (previously amended ) The method according to claim 1 , wherein said 
configuration parameters are transmitted to a group of digital data reception 
equipment (2) in an EMM message specific to a group of external security modules 
(6, 8) associated with one of said group of digital data reception equipment (2). 

15. (previously amended ) The method according to claim 1, wherein said 
configuration parameters are transmitted to a group of digital data reception 
equipment (2) in an EMM message specific to said group of digital data reception 
equipment (2). 

16. (previously amended) The method according to claim 6, wherein 
for a given group of digital data reception equipment (2), said updated list of 
identifiers of external security modules (6, 8) is transmitted in an EMM message 
specific to a said given group of external security modules (6, 8) associated with 
said digital data reception equipment (2). 
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17. (previously amended) The method according to claim 1 , wherein 
the configuration parameters for the verification phase are transmitted to a group of 
digital data reception equipment (2) using dedicated software executable in each 
digital data reception equipment (2) according to the identifier of the external security 
module associated with said digital data reception equipment. 

18. (previously amended) The method according to claim 6, wherein 
for a given group of digital data reception equipment (2), said updated list of 
identifiers of external security modules (6, 8) is transmitted to each digital data 
reception equipment (2) in a private flow processed by a dedicated software 
executable in each digital data reception equipment according to the identifier of the 
external security module associated with said digital data reception equipment. 

Claims 19-23 (previously cancelled). 

24. (previously amended) The method according to claim 1 , wherein 
the identifiers of the external security modules (6, 8) are grouped in an encrypted 
list. 

25. (previously amended) The method according to claim 1 , wherein 
the digital data reception equipment (2) includes a decoder and the external security 
modules (6, 8) include access control cards (6) in which information about access 
rights of a subscriber to digital data distributed by an operator is memorized, and in 
that pairing is done between said decoder and said access control cards (6). 
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26. (previously amended) The method according to claim 1 , wherein 
the digital data reception equipment (2) includes a decoder and the external security 
module (6, 8) includes a removable security interface (8) provided with a non-volatile 
memory that can cooperate firstly with the decoder, and secondly with a plurality of 
conditional access control cards (6) to manage access to digital data distributed by 
an operator, and wherein pairing is done between said decoder and said removable 
security interface (8). 

27. (previously amended) The method according to claim 1, wherein 
the digital data reception equipment (2) includes a decoder provided with a 
removable security interface (8) with a non-volatile memory that can cooperate firstly 
with said decoder, and secondly with a plurality of conditional access control cards 
(6), and wherein pairing is done between said removable security interface (8) and 
said access control cards (6). 

28. (previously amended) The method according to claim 10, wherein 
the data are audiovisual programs. 

29. (previously amended) Digital data reception equipment (2) for 
pairing to one or more external security modules (6, 8) each having a unique 
identifier to manage access to digital data distributed by an operator, comprising 
means for executing a computer program stored in a readable medium for: 

verifying whether or not the identifier in said external security modules 
(6, 8) is already memorized in the digital data reception equipment (2) upon 
connection of said external security modules (6, 8) to the digital data reception 
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equipment, 

activating the pairing of said digital data reception equipment (2) with said 
external security modules (6, 8) if the unique identifier of the external security 
modules (6, 8) is already memorized in an updated list of external security module 
identifiers transmitted to the digital data reception equipment (2), and 

deactivating the pairing of said digital data reception equipment (2) 
with said external security modules (6, 8) if the unique identifier in the external 
security modules (6, 8) is not already memorized in the digital data reception 
equipment (2). 

30. (previously amended) The digital data reception equipment 
according to claim 29, further comprising a decoder and wherein the external 
security module (6, 8) is an access control card (6) containing information about 
access rights of a subscriber to said digital data, pairing being done between said 
decoder and said access control card (6). 

31. (previously amended) The digital data reception equipment 
according to claim 29, further comprising a decoder and wherein the external 
security module (6, 8) is a removable security interface (8) provided with a non- 
volatile memory and that is designed to cooperate firstly with said decoder, and 
secondly with a plurality of conditional access control cards (6), to manage access to 
said digital data, pairing being done between said decoder and said removable 
security interface (8). 
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32. (previously amended) The digital data reception equipment 
according to claim 29, further comprising a decoder provided with a removable 
security interface (8) with a non-volatile memory designed to cooperate firstly with 
said decoder and secondly with a plurality of conditional access control cards (6) 
and wherein pairing is done between said removable security interface (8) and said 
access control cards (6). 

33. (previously amended) A decoder that can cooperate with a 
plurality of external security modules (6, 8) to manage access to audiovisual 
programs distributed by an operator, each external security module (6, 8) having a 
unique identifier and including at least one data processing algorithm, comprising 
means responsive to said data processing algorithm for : 

verifying whether or not the identifier of said external security modules 
(6, 8) is already memorized in the digital data reception equipment (2) upon 
connection of said external security modules (6, 8) to the digital data reception 
equipment, 

activating the pairing of said digital data digital data reception equipment (2) 
with said external security modules (6, 8) if the unique identifier of the external 
security modules (6, 8) is already memorized in the digital data reception equipment 
(2), and 

deactivating the pairing of said digital data reception equipment (2) 
with said external security modules (6, 8) if the unique identifier of the external 
security modules (6, 8) is not already memorized in the decoder. 
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34. (previously amended) The decoder according to claim 33, wherein 
said external security modules (6, 8) are access control cards (6) in which are stored 
information about access rights of a subscriber to digital data distributed by an 
operator. 

35. (previously amended) The decoder according to claim 33, 
wherein said external security modules (6, 8) are removable security interfaces (8) 
including a non-volatile memory that can cooperate firstly with the decoder and 
secondly with a plurality of conditional access control cards (6) to manage access to 
digital data distributed by an operator. 

36. (currently amended) Removable security interface (8) including a non- 
volatile memory designed for pairing one unique digital data reception equipment (2) 
having a decoder with a plurality of access control cards (6) of a plurality of ene-or- 
mofe-external security modules, to manage access to digital data distributed by an 
operator, each access control card (6) having a unique identifier and containing 
information about access rights of a subscriber to said digital data, said removable 
security interface further comprising means for recording the identifier of each 
access control card (6) in said non-volatile memory, and at least one data 
processing algorithm for use by said decoder to activate or deactivate the pairing of 
the reception equipment to the control cards. 

37. (previously amended) The removable security interface according 
to claim 36, comprising a PCMCIA card on which is installed digital data 
descrambling software. 
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38. (previously amended) The removable security interface according 
to claim 36, which consists of a software module. 

39. (previously amended) An executable computer program stored in 
a computer readable medium of a digital data reception equipment (2) that can 
cooperate with a plurality of external security modules (6, 8) each having a unique 
identifier and in which information about access rights of a subscriber to digital data 
distributed by an operator are stored, said digital data reception equipment (2) 
comprising a computer for executing said executable computer program, wherein 
the executable computer program includes instructions for: 

verifying whether or not the identifier of said external security modules 
(6, 8) is already memorized in a list of external security modules transmitted to the 
digital data reception equipment (2) upon connection of said external security 
modules (6, 8) to the digital data reception equipment, 

activating the pairing of said digital data reception equipment (2) with 
said external security modules (6, 8) if the unique identifier in the external security 
modules (6, 8) is already memorized in the digital data reception equipment (2), and 

deactivating the pairing of said decoder with said external security 
modules (6, 8) if the unique identifier in the external security modules (6, 8) is not 
already memorized in the decoder. 

40. (previously amended) The computer program according to claim 
39, further comprising instructions for locally generating pairing control parameters 
of the digital data reception equipment (2) with an external security module (6, 8) as 
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a function of a control signal transmitted to said digital data reception equipment (2) 
by the operator. 

41. (previously amended) The computer program according to claim 
39, further comprising instructions for checking if the identifier of said external 
security module (6, 8) is memorized in the digital data reception equipment (2), at 
each connection the external security module (6, 8) with the digital data reception 
equipment (2). 

42. (previously amended) A system comprising a management 
platform (1) and a digital data reception equipment (2) connected to a services 
broadcasting network for communication with the digital data reception equipment 
and with the digital data reception equipment (2) being paired with a plurality of 
external security modules (6, 8), each having a unique identifier, wherein the system 
further comprises: 

a first module arranged in said commercial management platform (1) for 
generating pairing queries, and 

a second module arranged in said digital data reception equipment (2) 
that will process the generated queries from the first module to prepare a pairing 
configuration to control said pairing, using pairing control parameters generated by a 
computer in said digital data reception equipment based upon 

verifying whether or not the identifier of said external security modules (6, 8) 
is already memorized in an updated list of external security module identifiers 
transmitted to the digital data reception equipment (2) upon connection of said 
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external security modules (6, 8) to the digital data reception equipment, 

activating the pairing of said digital data reception equipment (2) with said 

external security modules (6, 8) if the unique identifier of the external security 

modules (6, 8) is already memorized in the digital data reception equipment (2), and 
deactivating the pairing of said decoder with said external security modules 

(6, 8) if the unique identifier of the external security modules (6, 8) is not already 

memorized in the decoder. 

43. (previously amended) The method according to claim 5, wherein 
said control signal is transmitted to a digital data reception equipment (2) in an EMM 
message specific to an external security module (6, 8) associated with said digital 
data reception equipment (2). 

44. (previously amended) The method according to claim 5, wherein 
said control signal is transmitted to a digital data reception equipment (2) in an EMM 
message specific to said digital data reception equipment (2). 

45. (previously amended) The method according to claim 5, wherein 
said control signal is transmitted to a group of digital data reception equipment (2) in 
an EMM message specific to a group of external security modules (6, 8) associated 
with said digital data reception equipment (2). 

46. (previously amended) The method according to claim 5, wherein 
said control signal is transmitted to a group of digital data reception equipment (2) in 
an EMM message specific to said group of digital data reception equipment (2). 
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47. (previously amended) The method according to claim 5, wherein 
the message for managing the verification phase is transmitted to a group of digital 
data reception equipment (2) using dedicated software executable in each digital 
data reception equipment as a function of the identifier of the external security 
module associated with said digital data reception equipment. 

Claims 48-53 (previously cancelled). 
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